Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/723d6e75-4a09-342d-834a-399bd506da62.roa
File:                     723d6e75-4a09-342d-834a-399bd506da62.roa (raw, json)
Hash identifier:          J+9f73DgBXKtXyr15bi3lF3iOEaauPtfM9egNHzV1PU=
Subject key identifier:   65:FE:FC:81:55:30:81:6A:91:6D:4C:04:D9:92:F6:DB:FB:F3:65:24
Certificate issuer:       /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial:       010D0C9F432858491AA6C6B0F4C8F6DC4BD80780
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/723d6e75-4a09-342d-834a-399bd506da62.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     53654
IP address blocks:        2602:f98d::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c6:b0:f4:c8:f6:dc:4b:d8:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=004b620f-87dc-4b3f-8872-d9a148cd21bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:34:d5:fc:64:51:9a:7d:59:96:df:d7:ad:
                    6e:05:75:7b:96:d0:68:45:52:77:ce:4f:e7:e0:fb:
                    3b:a3:85:b9:70:3d:2a:ab:79:81:e2:26:fb:55:f2:
                    1a:99:8d:dd:36:2d:5a:f2:6d:ae:c7:82:9b:04:92:
                    1f:7c:d0:b4:1a:68:13:ad:c1:54:51:60:8a:30:23:
                    ce:b3:12:c4:54:85:72:fa:64:d4:03:6a:68:5c:0d:
                    e3:8d:e1:1f:1c:7b:bc:0c:ed:3d:37:e8:10:b8:73:
                    6c:6a:ff:63:10:39:45:e3:da:5a:1a:13:37:5a:3e:
                    f4:92:9e:8f:e8:2c:5e:4a:c7:b9:c8:48:9d:a2:df:
                    cf:3a:ed:49:c3:bd:88:96:8b:7a:4a:8a:c3:b8:54:
                    71:27:f4:46:64:6f:43:70:19:ea:39:81:7a:ec:9b:
                    f5:8d:fa:04:af:e8:01:fe:ed:09:3b:fb:01:19:f1:
                    f9:14:bc:f6:b3:00:1e:81:ed:b9:2d:f2:d6:2e:b1:
                    0e:46:7b:9b:66:36:dc:6d:21:2a:cf:19:af:71:e5:
                    11:ac:73:5e:ce:d4:25:b4:ee:03:64:6e:3f:2c:53:
                    63:02:2f:f4:54:3b:53:36:25:bd:01:ff:33:be:e7:
                    1d:90:9c:1c:d7:ff:60:23:f4:e2:00:14:f4:36:b1:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FE:FC:81:55:30:81:6A:91:6D:4C:04:D9:92:F6:DB:FB:F3:65:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/723d6e75-4a09-342d-834a-399bd506da62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl

            X509v3 Authority Key Identifier:
                keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:e5:c4:8b:a8:31:12:14:8f:94:09:b1:63:a9:a3:10:25:
         45:3b:5c:a1:f8:77:a3:de:da:3a:70:47:31:28:98:e9:e4:37:
         94:ed:f4:fd:f7:46:9a:df:74:fa:a0:91:fe:9e:1a:ff:06:30:
         8a:27:b1:58:c6:55:68:bd:c1:a0:95:9b:e3:99:04:d3:61:64:
         f8:2b:aa:72:4c:95:25:b1:0f:00:be:96:f4:b0:4b:7c:8b:6b:
         b2:38:a1:9d:3d:56:bb:7e:60:63:d3:2e:f3:89:e3:ee:91:04:
         ea:e2:fd:af:c1:6b:96:02:aa:89:22:de:0a:0a:75:6c:78:ce:
         aa:86:51:58:94:84:a7:f8:a8:bd:79:05:ab:c6:11:55:a7:64:
         ab:64:d0:69:0f:38:bc:40:10:6b:01:fe:6a:83:85:e4:72:a4:
         13:f9:42:18:57:e6:99:a6:b8:2d:00:06:7e:0f:3c:9d:d0:fd:
         c5:e1:16:d9:05:93:61:c4:de:a0:84:9c:33:9f:6b:ae:a0:85:
         32:3b:2a:71:5e:d9:49:0f:a9:3a:45:27:19:27:9c:e1:8a:96:
         a6:8b:58:f9:f4:50:f9:f9:17:80:ed:5c:b4:71:3c:a1:99:74:
         56:59:a9:94:a0:17:34:11:1d:3a:10:db:90:4d:b2:f7:29:0d:
         03:aa:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:22 2025 by rpki-client